Virus Database

Casino.2330

Description Casino.2330

Casino.2330 is a memory resident very dangerous virus which starts, finds and infects .COM-files of current directory, creates file COMMAND.COM (pseudo-COMMAND.COM) and writes its body into. After this, the virus starts this file, the virus from the pseudo-COMMAND.COM stays memory resident and removes this file from disk. Then the virus infects the .COM-files from memory-resident part.
The virus detects write protected disk by the read/write operation through INT 13h with this disk. The infector that removes the READ-ONLY attribute , contains the texts: "*.COM", "C:COMMAND.COM", "COMMAND", ".COM", hooks INT 21h.
On January, April, August, 15th the virus reads into computer' memory FAT of current drive, erases this FAT from disk and presents to play in game: if virus loses it restores the FAT contents on disk, if not - the FAT is not restored. While playing this game the virus displays:

and:
BASTARD ! You`re lucky this time - but for your own sake, now
SWITCH OFF YOUR COMPUTER AND DON`T TURN IT ON TILL TOMORROW !!!
or:
No Fuckin` Chance; and I`m punishing you for trying to trace me down !
or:
HA HA !! You asshole, you`ve lost: say Bye to your Balls all

Check other viruses! Be aware! Use Antiviral Software

Macro.Word97.Day

Description Macro.Word97.Day

This is a silly but very dangerous macro virus. On opening an infected document the virus copies its body into the global macros area (NORMAL.DOT). Other documents get infection on their opening.
When any document is being opened, the virus checks the system date, and starting from 2nd June 1999 writes into the AUTOEXEC.BAT file a set of commands that delete all data on C: and D: drives.
The virus body contains the comment:
it is a good day to die

Macro.Word97.Desecration

Description Macro.Word97.Desecration

This is Chinese (Taiwan) specific macro virus contains five macros in one module "Desecration": AutoOpen, FileSave, FileNew, FileOpen, Desecration.
The virus infects the global macros area on opening an infected document (AutoOpen). Other documents get infection on their open, creating and saving (FileOpen, FileNew, FileSave).
The virus does not manifest itself in any way. The code of virus contains the comment:
Desecration By RUiNER /Sign Of Scream

Home